Changeset 44524 for trunk/src/wp-admin/plugins.php

Timestamp:

01/09/2019 08:04:55 PM (6 years ago)

Author:

flixos90

Message:

Bootstrap/Load: Introduce fatal error recovery mechanism allowing users to still log in to their admin dashboard.

This changeset introduces a WP_Shutdown_Handler class that detects fatal errors and which extension (plugin or theme) causes them. Such an error is then recorded, and an error message is displayed. Subsequently, in certain protected areas, for example the admin, the broken extension will be paused, ensuring that the website is still usable in the respective area. The major benefit is that this mechanism allows site owners to still log in to their website, to fix the problem by either disabling the extension or solving the bug and then resuming the extension.

Extensions are only paused in certain designated areas. The frontend for example stays unaffected, as it is impossible to know what pausing the extension would cause to be missing, so it might be preferrable to clearly see that the website is temporarily not accessible instead.

The fatal error recovery is especially important in scope of encouraging the switch to a maintained PHP version, as not necessarily every WordPress extension is compatible with all PHP versions. If problems occur now, non-technical site owners that do not have immediate access to the codebase are not locked out of their site and can at least temporarily solve the problem quickly.

Websites that have custom requirements in that regard can implement their own shutdown handler by adding a shutdown-handler.php drop-in that returns the handler instance to use, which must be based on a class that inherits WP_Shutdown_Handler. That handler will then be used in place of the default one.

Websites that would like to modify specifically the error template displayed in the frontend can add a php-error.php drop-in that works similarly to the existing db-error.php drop-in.

Props afragen, bradleyt, flixos90, ocean90, schlessera, SergeyBiryukov, spacedmonkey.
Fixes #44458.

File:

• trunk/src/wp-admin/plugins.php (modified) (3 diffs)

trunk/src/wp-admin/plugins.php

@@ -390 +390 @@
             break;
 
+        case 'resume':
+            if ( ! current_user_can( 'resume_plugin', $plugin ) ) {
+                wp_die( __( 'Sorry, you are not allowed to resume this plugin.' ) );
+            }
+
+            if ( is_multisite() && ! is_network_admin() && is_network_only_plugin( $plugin ) ) {
+                wp_redirect( self_admin_url( "plugins.php?plugin_status=$status&paged=$page&s=$s" ) );
+                exit;
+            }
+
+            check_admin_referer( 'resume-plugin_' . $plugin );
+
+            $result = resume_plugin( $plugin, self_admin_url( 'plugins.php?error=resuming' ), is_network_admin() );
+
+            if ( is_wp_error( $result ) ) {
+                wp_die( $result );
+            }
+
+            wp_redirect( self_admin_url( "plugins.php?resume=true&plugin_status=$status&paged=$page&s=$s" ) );
+            exit;
+
         default:
             if ( isset( $_POST['checked'] ) ) {
@@ -489 +510 @@
         );
         $errmsg .= ' ' . __( 'If you notice “headers already sent” messages, problems with syndication feeds or other issues, try deactivating or removing this plugin.' );
+    } elseif ( 'resuming' === $_GET['error'] ) {
+        $errmsg = __( 'Plugin could not be resumed because it triggered a <strong>fatal error</strong>.' );
     } else {
         $errmsg = __( 'Plugin could not be activated because it triggered a <strong>fatal error</strong>.' );
@@ -542 +565 @@
 <?php elseif ( 'update-selected' == $action ) : ?>
     <div id="message" class="updated notice is-dismissible"><p><?php _e( 'All selected plugins are up to date.' ); ?></p></div>
+<?php elseif ( isset( $_GET['resume'] ) ) : ?>
+    <div id="message" class="updated notice is-dismissible"><p><?php _e( 'Plugin <strong>resumed</strong>.' ); ?></p></div>
 <?php endif; ?>